# live-ldgr-enn.pages.dev — SUSPICIOUS

> live-ldgr-enn.pages.dev active credential theft domain with 0/95 VirusTotal detections. Immediate block recommended.

## Summary
PhishDestroy identifies the domain live-ldgr-enn.pages.dev as a credential theft endpoint currently under active observation with a risk level classified as 'under_investigation'. 

This domain employs a Pages.dev subdomain to mimic legitimate services, suggesting an attempt to harvest user credentials under false pretenses. No confirmed impersonation of a specific brand has been verified at this stage, but the infrastructure and naming convention warrant urgent attention from security teams.

The domain resolves to IP address 188.114.96.3 and utilizes Google Trust Services for its SSL certificate. As of current intelligence, the domain has not been flagged by any of the 95 VirusTotal vendors queried. It was registered through Cloudflare, Inc., which may indicate an attempt to leverage reputable hosting services for malicious purposes. The domain’s lack of detections highlights a potential gap in threat visibility, emphasizing the need for proactive blocking and further investigation.

Given the active status and absence of detection despite suspicious characteristics, immediate action is advised. Security teams should block live-ldgr-enn.pages.dev and its associated IP at the network perimeter. Additionally, users should be warned against interacting with this domain, and a threat hunt should be conducted for related infrastructure using the seed identifier 78fb56. Continued monitoring is essential due to the domain’s evolving nature and the possibility of escalated malicious activity.

## Threat Details
- Verdict: SUSPICIOUS
- Site status: unknown (HTTP ?)

## Domain Intelligence
- Registrar: Cloudflare, Inc.
- IP: 188.114.96.3

## Detection Status
- VirusTotal: 0 vendors flagged
- Google Safe Browsing: clean
- Blocklists: 0 hits

## Evidence
- Cloudflare Radar: https://radar.cloudflare.com/scan/059c0b28-8ed7-49e3-a0eb-64da5f83b95b
- PhishDestroy: https://phishdestroy.io/domain/live-ldgr-enn.pages.dev/
- LLM endpoint: https://phishdestroy.io/domain/live-ldgr-enn.pages.dev/llm.txt

## If You Visited This Site
1. Change any passwords you may have entered
2. Enable 2FA on all related accounts
3. Monitor your accounts for unauthorized activity
4. Report to: FBI IC3, Europol, local authorities

---
Report by PhishDestroy | https://phishdestroy.io/domain/live-ldgr-enn.pages.dev/
Last updated: 2026-04-12